Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: Vaa5pbCSHkrixCBwo+v/xAGAnWoWELrOS+QT3VJ5Vwg=
Subject key identifier: AE:33:31:5A:A7:91:0C:04:A7:B3:A5:2F:41:E3:25:D6:91:EE:37:48
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 0194BB9753C4F26367FDACF449D4797E7DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 11C9
Signing time: Fri 31 Jan 2025 09:00:44 +0000
Manifest this update: Fri 31 Jan 2025 09:00:44 +0000
Manifest next update: Sat 01 Feb 2025 09:00:44 +0000
Files and hashes: 1: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: esFFbsVMuv/dnpmheMKxOYsGKFa6aQSGe+h0Z8j3hA8=)
2: ilRpOqqhCRrukRL5kvILbezdwjw.roa (hash: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:53:c4:f2:63:67:fd:ac:f4:49:d4:79:7e:7d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Jan 31 09:00:44 2025 GMT
Not After : Feb 1 09:00:44 2025 GMT
Subject: CN=ae33315aa7910c04a7b3a52f41e325d691ee3748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:23:dc:19:7e:08:40:5e:ca:16:0a:9e:e7:
1f:bf:ef:76:48:35:7b:3c:ea:a6:13:7b:bc:73:57:
71:d6:84:ad:32:4c:c9:cd:a2:17:13:96:7f:d9:aa:
aa:1d:c1:f8:d8:7f:b3:b8:9f:01:a2:68:fa:cc:25:
4b:28:d0:d1:63:a6:71:e9:49:dd:33:c6:5e:fd:24:
0a:7a:9e:6f:bc:91:7e:01:a3:4a:d0:18:02:9a:71:
f8:79:98:3d:bd:21:46:27:34:ab:d5:fd:01:d3:56:
20:64:83:27:17:f6:c1:c0:4a:99:28:c7:e4:14:79:
23:ef:36:b2:eb:ed:9b:fd:78:2f:c4:4c:17:1e:db:
07:4b:d5:3c:d4:00:24:ee:9d:93:06:04:26:59:db:
c6:a3:a3:e1:e9:18:81:cd:9d:20:53:e0:14:4f:5d:
b0:19:e0:ee:6a:62:d4:d6:78:45:2d:6c:d6:e1:31:
24:b5:9e:c1:67:de:a6:bc:8a:d4:fc:3a:b2:88:88:
41:de:8e:e5:af:9d:d9:db:2e:89:bd:9f:fe:c7:21:
28:9e:27:f3:d4:8e:ef:43:e5:08:05:f9:6d:e5:35:
dc:01:21:ae:44:da:5f:37:fd:35:c7:ae:f6:ce:c8:
6d:2d:ae:27:09:61:76:b4:05:c9:94:74:f8:0e:f2:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:31:5A:A7:91:0C:04:A7:B3:A5:2F:41:E3:25:D6:91:EE:37:48
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:22:f3:52:69:fd:b3:fc:c3:95:d9:33:30:f6:cf:d5:f6:
46:86:78:b7:eb:2b:d4:2d:c7:3d:07:e2:a6:35:9d:33:09:4a:
e9:fa:14:ee:16:53:58:2d:8a:39:c4:a7:56:e5:d1:d0:df:94:
ba:02:06:c4:91:b0:9d:e0:eb:db:e3:06:96:ac:79:3d:bc:ae:
83:60:4e:c5:3f:a6:74:db:f3:a9:8e:2d:cd:c0:c1:5e:2d:81:
33:d9:09:06:66:bd:8e:00:25:33:7f:48:05:5a:02:12:48:1a:
a2:ca:5b:e2:49:a6:d8:21:e2:90:27:5c:41:38:61:d2:07:47:
56:95:19:6b:a4:c5:5a:4b:21:15:3b:77:27:29:cc:c8:cf:37:
a7:b3:9e:3a:2b:28:fe:86:dd:44:39:4c:50:49:5e:cf:1d:5a:
20:bf:81:51:8e:3e:bb:ba:7d:ec:40:01:c4:36:4d:0b:94:ea:
8c:5e:d0:a4:d4:de:d4:a3:7d:77:59:d8:89:c6:a9:2d:c5:0d:
3c:ba:ad:d7:31:bf:a4:dd:46:8a:b1:97:20:ce:ff:e6:c8:07:
10:0e:02:82:75:70:c5:6f:36:0e:32:72:b4:16:10:c5:e8:df:
ed:ed:e2:46:a1:e5:19:aa:68:10:68:e6:58:9f:d4:cb:ed:41:
77:fe:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:09 2025 by rpki-client on console-fra.rpki-client.org